$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa File: 38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa (raw, json) Hash identifier: kXjBUo1c3FGnbcpAdfkzolDM2dP6/R/GA3E7JymMRuY= Subject key identifier: 10:8C:51:B0:BC:42:11:01:91:AD:77:CA:BB:41:2B:64:4D:73:39:91 Certificate issuer: /CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Certificate serial: 010D0C9F432858495ABEE44032BBA1DBAEC71B20 Authority key identifier: 9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 400426 IP address blocks: 128.254.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:e4:40:32:bb:a1:db:ae:c7:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=711a04de-db2a-4e54-8693-ca6a2c107ab4 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=275fd6f3-4ec9-4b43-b9f4-55352db93886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fa:69:ca:da:e0:09:97:07:fe:ad:2a:ed:72: 6b:8b:41:8e:f6:ec:36:91:89:d7:3c:e3:7f:7a:72: 42:60:0b:fa:25:66:23:8b:68:23:84:73:60:80:77: 4c:36:4e:02:1a:8b:1c:26:1b:21:5a:04:54:25:27: 9e:dd:9a:2f:bf:41:3b:ed:74:48:e8:cb:73:65:e3: fb:9d:ef:fc:c9:c3:37:f2:0f:fe:8e:ab:3d:fd:e1: cb:1b:60:62:56:11:d1:c0:81:c3:9f:07:cc:b2:76: 59:55:d7:4a:dc:4b:48:5e:62:1e:4f:a2:d4:48:c1: 67:12:ef:bd:e3:e3:2a:d7:4e:e6:da:20:e0:80:1d: 8e:71:8a:36:5e:64:1d:fe:44:90:a8:7a:1e:67:bb: f6:11:2d:4d:58:fd:a7:d0:3b:1f:d8:25:a8:5e:da: 3f:25:ac:91:0f:3b:d0:b0:dd:e0:e5:6e:8a:df:6f: 03:87:c4:da:1a:78:7d:31:0a:dc:90:ea:f6:a3:ad: f8:83:90:33:3d:7e:5c:6d:50:6d:ff:06:1f:05:e6: b3:91:83:c4:eb:95:c6:5a:ac:39:da:9d:65:a8:ca: 6e:3c:a8:ab:79:84:88:13:ae:60:88:4a:a9:30:f4: 67:66:16:7d:ba:73:6f:8e:0a:f7:17:b8:9f:dc:2a: 69:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8C:51:B0:BC:42:11:01:91:AD:77:CA:BB:41:2B:64:4D:73:39:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl X509v3 Authority Key Identifier: keyid:9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer sbgp-ipAddrBlock: critical IPv4: 128.254.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:b5:2e:05:d0:f6:e2:27:dc:ee:62:b7:41:5e:93:a9:01:d8: 35:f8:6e:02:12:59:42:23:97:12:30:d4:7a:9b:39:58:a8:3f: d4:50:9a:13:3d:1c:26:63:00:43:77:97:c7:3f:43:2e:76:7a: 1f:54:f7:50:d4:ea:06:47:a0:d8:ca:37:39:4d:55:dd:ef:62: cb:25:74:70:bc:25:93:c6:ad:ec:eb:7f:6f:55:6c:f5:45:d7: 01:18:a5:92:cd:ad:2d:0d:8c:f8:ca:ea:92:e1:0b:dd:76:50: de:9f:46:9f:37:86:10:49:86:93:8e:1a:c8:7e:23:b2:b9:88: cb:61:64:0b:b2:e7:90:c8:16:59:49:e3:85:4a:03:fa:33:31: 3d:43:d8:4d:dc:dd:5f:0c:bd:c9:f3:ef:95:bd:1f:7e:93:ee: c2:16:d4:64:1b:b9:4f:35:ee:5a:da:2f:e9:6d:cb:28:1d:54: 43:ef:06:75:cb:44:f8:30:86:04:1d:33:49:c6:93:45:93:01: 3b:29:c7:64:04:09:75:af:bb:88:8c:fa:88:fe:fe:c0:40:b7: 60:87:c9:5f:14:e7:f5:c8:3b:25:07:9a:ee:0b:5c:cb:1f:19: c4:a6:48:ae:69:0e:bf:3f:cd:11:d6:5b:49:d9:f0:67:ac:55: 0a:ec:71:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavuRAMruh267HGyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzExYTA0ZGUtZGIyYS00ZTU0LTg2OTMtY2E2YTJjMTA3 YWI0MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk Mjc1ZmQ2ZjMtNGVjOS00YjQzLWI5ZjQtNTUzNTJkYjkzODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/ppytrgCZcH/q0q7XJri0GO9uw2kYnXPON/ enJCYAv6JWYji2gjhHNggHdMNk4CGoscJhshWgRUJSee3Zovv0E77XRI6MtzZeP7 ne/8ycM38g/+jqs9/eHLG2BiVhHRwIHDnwfMsnZZVddK3EtIXmIeT6LUSMFnEu+9 4+Mq107m2iDggB2OcYo2XmQd/kSQqHoeZ7v2ES1NWP2n0Dsf2CWoXto/JayRDzvQ sN3g5W6K328Dh8TaGnh9MQrckOr2o634g5AzPX5cbVBt/wYfBeazkYPE65XGWqw5 2p1lqMpuPKireYSIE65giEqpMPRnZhZ9unNvjgr3F7if3CppFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCMUbC8QhEBka13yrtBK2RNczmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MTFh MDRkZS1kYjJhLTRlNTQtODY5My1jYTZhMmMxMDdhYjQvMzhjYzkwNjMtZmMzNy0z NDljLTk2NzUtM2U4ZjZkYWZjYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzExYTA0ZGUtZGIyYS00ZTU0LTg2 OTMtY2E2YTJjMTA3YWI0LzcxMWEwNGRlLWRiMmEtNGU1NC04NjkzLWNhNmEyYzEw N2FiNC5jcmwwHwYDVR0jBBgwFoAUnky2obqwrVzSyH3az5zCeW4LNp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83MTFhMDRkZS1kYjJhLTRlNTQtODY5My1jYTZh MmMxMDdhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgP6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANi1LgXQ9uIn3O5it0Fek6kB2DX4bgISWUIjlxIw1HqbOVioP9RQmhM9 HCZjAEN3l8c/Qy52eh9U91DU6gZHoNjKNzlNVd3vYssldHC8JZPGrezrf29VbPVF 1wEYpZLNrS0NjPjK6pLhC912UN6fRp83hhBJhpOOGsh+I7K5iMthZAuy55DIFllJ 44VKA/ozMT1D2E3c3V8Mvcnz75W9H36T7sIW1GQbuU817lraL+ltyygdVEPvBnXL RPgwhgQdM0nGk0WTATspx2QECXWvu4iM+oj+/sBAt2CHyV8U5/XIOyUHmu4LXMsf GcSmSK5pDr8/zRHWW0nZ8GesVQrscZs= -----END CERTIFICATE-----Generated at Fri Apr 4 18:54:53 2025 by rpki-client